MeterPilot trust center

Privacy Policy

Effective September 14, 2026

This policy explains how MeterPilot handles information when you use the MeterPilot Android application, website, cloud synchronization, and related services. “MeterPilot”, “we”, and “us” refer to the operator of MeterPilot. Questions can be submitted through the contact and feedback form.

Information you choose to provide

MeterPilot can process property and site names, meter names and identifiers, utility-provider details, readings, billing-cycle information, bill amounts and references, notes, alert preferences, and team or workspace information. If you sign in, we also process your Google account identifier, name, email address, profile image when supplied, authentication tokens, and the technical identifiers needed to keep your data synchronized.

Guest and signed-in use

Guest records are stored locally on your device and work without an account. If you choose to sign in and connect cloud features, eligible local records are synchronized to your MeterPilot account. Signing in is optional for core local meter tracking.

Notifications and technical information

With your permission, MeterPilot uses local notifications for reading reminders and anomaly alerts. When cloud notifications are configured, a Firebase Cloud Messaging token may be registered so a notification can reach your device. The service also maintains security, synchronization, and audit information such as record identifiers, timestamps, request context, membership roles, and changes made to cloud records. We do not sell personal information or use it for third-party advertising.

Contact and product feedback

If you contact us, join the launch list, report a bug, or request a feature, we store the details you submit and an encrypted contact address. Signed-in users may optionally attach screenshots; these are stored privately and are available only to the submitting account and authorized platform administrators. To investigate and prevent abuse, a support request may also include the requesting IP address, a one-way IP fingerprint, browser or device signature, language and country hints, source page, app version, and request identifier. Sensitive support fields, including the raw IP address and original attachment name, are encrypted at rest. Signed-in app feedback is linked to the authenticated account and active workspace. We retain the conversation, administrator notes, response channels, delivery outcomes, and the administrator handling the request as part of its support history. We never copy cookies, authorization headers, passwords, sign-in tokens, push tokens, or payment details into support context, and you should not include them in your message or screenshot.

Optional website analytics

On the public MeterPilot website, Google Analytics loads automatically to help us understand traffic and which pages and guides visitors find useful. Google may process page, browser, device, approximate location, referral, and interaction information under its own privacy terms. The MeterPilot admin panel and Android app are excluded from this website analytics integration. You can limit this processing through browser privacy controls, content blockers, or Google's available opt-out controls.

Why information is used

• Provide meter, reading, bill, reporting, reminder, collaboration, export, and synchronization features.
• Authenticate accounts and enforce property, workspace, role, plan, and resource access rules.
• Protect data integrity, investigate errors or abuse, and maintain an auditable history.
• Operate purchases and entitlements when paid plans are offered through Google Play.
• Comply with applicable legal obligations and respond to valid requests.

Service providers

MeterPilot uses carefully selected infrastructure providers to host and protect synchronized account data, and Google services for sign-in, optional cloud notifications, and app distribution. Utility-provider websites are opened only when you deliberately choose to visit them. These providers process limited information according to their roles and policies. MeterPilot does not give utility providers access to your MeterPilot account merely because you open their public portal.

Storage, security, and retention

Network traffic uses HTTPS. Sensitive provider identifiers and sensitive support fields are encrypted before server storage, and cloud access is scoped by account, workspace, role, and resource. No system can guarantee absolute security. Deleted meter-related records may remain in a restricted recovery area for up to 90 days before permanent purge. Portable export files expire after seven days. Resolved or closed support conversations are normally removed after one year. A requested account deletion has a seven-day cancellation period and then removes the account and owned cloud data, subject to limited retention required for security, fraud prevention, legal compliance, and infrastructure backup expiry.

Your choices

You can use guest mode, decline notifications, edit or delete records, export eligible cloud data as JSON or CSV, sign out, revoke Google access, and request account deletion. Shared workspaces may require ownership transfer before deletion. See the account-deletion instructions.

Children

MeterPilot is a general utility-management tool and is not directed to children. We do not knowingly solicit personal information from children.

Changes

We may update this policy when the product or legal requirements change. The effective date above will be revised, and material changes will be communicated where appropriate.